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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Original) Access control method controlling access to a broadcast digital dataflow 
previously scrambled using an encryption key CW transmitted in encrypted form in an 
entitlement control message ECM also including at least one access control criterion CA, said 
numeric data possibly being recorded as such in a receiving terminal or decrypted during 
transfer, characterised in that the method includes the following steps: 

on transmission: 

- generating an entitlement control message R-ECM C for recobding the content of the flow 
as a function of a recording key KRo and at least one criterion CRR defining a right to 
record, 

- generating an entitlement control message P-ECM C controlling access to play back the 
content of the recorded flow as a function of a playback key KP C and at least one criterion 
CRP defining a right to play back, and 

on reception: 

- analysing the message R-ECM C , and 

- authorising the recording if the criterion CRR is verified, otherwise prohibit recordinq, 

- analysing the message P-ECM C , and 

-authorising the playback if the criterion CRP is verified, otherwise prohibit the playback. 

2. (Original) Method set forth in claim 1, characterised in that the keys CW, KRc and KP C are 
encrypted by a first service key K5. 

3. (Original) Method set forth in claim 1, characterised in that the keys CW, KRc and KP C are 
encrypted by three different service keys, namely K s , K sr and K sp respectively. 

4. (Currently Amended) Method set forth in eith e r claim 2 e*^, characterised in that the 
sending phase includes the following steps: 
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for each dataflow: 

- breakdowning the scrambling period into a sequence of crypto-periods CF; each 
defining a validity duration of an individual key CWj, and at each crypto-period change, 

- scrambling the content of the flow using the key CWi, and memorise a value p(i) 
representative of the parity of i,ing an entitlement control message SC — ECMi as a 
function of the previously defined encryption keys CW^, CWi, CWj+i, the value p(i) and 
the criterion CAj, said message SC — ECMi being intended to transport access rights to a 
data segment Si corresponding to at least two crypto-periods, 

- encrypting the keys CWm, CW i5 CWi+i, using the playback key KP C , 

- encrypting the result of the encryption in the previous step using a second service 
keyK' s , 

- encrypting the result of the encryption in the previous step using the recording 
keyKRc. 

5. (Currently Amended) Method set forth in e ith e r claim 2 ei^, characterised in that the 
sending phase includes the following steps: 
for each dataflow: 

- breakdowning the scrambling period into a sequence of crypto — periods CPj each 
defining a validity duration of an individual key CWj, and at each crypto-period change, 

- scrambling the content of the flow using the key CW i? and memorise a value p(i) 
representative of the parity of i, 

- calculating an entitlement control message SC- ECMi as a function of the 
previously defined encryption keys CW i+ i, CWi, CWj+i, the value p (i) and the criterion CA i3 
said message SC-ECMi being intended to transport access rights to a data segment ~1 
corresponding to at least two crypto-periods, 

- encrypting the keys CWj+i, CWi, CWi+i using a second service key K' s , 

- encrypting the result of the encryption in the previous step using the key KP C , 

- encrypting the result of the encryption in the previous step using the recording 

keyKRc. 



6. (Currently Amended) Method set forth in e ither claim 4 ep4, characterised in that the 
emission phase also includes the following steps: 
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- calculating the entitlement control message ECMj = f[(ECWj,OCWj,CA)] wherein ECWj 
and OCWj represent the even and odd control words previously encrypted using a first service 
key K5, respectively 

ECWi=CWi if i is even, otherwise ECWi=CWi+l; 
OCWrCWi if i is odd, otherwise OCWj=CW i+ , 

- broadcasting parameters in the ECM signal, identifying the ECM channels attached to 
the service broadcasting the content of messages ECMj, P-ECMc, R- ECM C , SC-ECMj, 

- providing the ECMj, P-ECM C , R-ECM C , SC-ECMj messages to the receiving terminal. 

7. (Original) Method set forth in claim 6, characterised in that the ECMj, P-ECM C , R-ECM 0 , 
SC-ECMj messages are broadcast on ECM channels associated with the content of segment Si. 

8. (Original) Method set forth in claim 6, characterised in that the R-ECM message is output to 
the receiving terminal on request from an Authorisation Server at the network entry. 

9. (Original) Method set forth in claim 6, characterised in that the P-ECM message is output to 
the receiving terminal on request from an Authorisation Server at the network entry. 

10. (Original) Method set forth in claim 7, characterised in that the reception phase includes the 

following steps: 

- recovering the ECM channel from the ECMi message, using the signal attached 
to the service broadcasting the dataflow, and at each change of i, 

- analysing the message ECMj so as to recover the even control word OCW and the 
odd control word ECW, to descramble the content of the broadcast flow so as to obtain 
direct access to this content. 

1 1 . (Original) Method set forth in claim 7, characterised in 
that the reception phase includes the following steps: 

- recovering the ECM channel from the P-ECM C , R-ECM C , SC-ECMj messages, 
from the signal attached to the service broadcasting the content; 

- analysing the R-ECM C message to verify record access criteria CRR, 

- memorising the recording key KRc 
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- recovering the message P-ECM C and store it with the content; and 
for each cryp to-period i: 

- recovering the message SC-ECMi, 

- decrypting the message SC-ECMi using the recording key KRc, and 

- recording the decrypted message SC-ECMi with the content. 

12. (Original) Method set forth in claim 7, characterised in that playback access to the content 
in the recorded flow is obtained according to the following steps: 

-recovering the message P-ECM C in the content and analyse it to verify read access 

criteria CRP, 

-memorising the playback key KP c; and 

- recovering the current SC— ECMi message in the content; 

-decrypting the SC-ECMi message with the playback key KP C and verify access 
criteria, 

- recovering the encrypted keys CWj+i, CW i9 CW i+ i and the value p(i) indicating 
the parity of i, and 

- decrypting said keys depending on the read direction to deduce ECW and OCW 
from them; then 

- applying either ECW or OCW to descramble the content when playing back. 



13. (Original) Method set forth in claim 7, characterised in that access to play back the content 
of the flow is obtained according to the following steps: 

- recovering the message P-ECM C in the content, 

- analysing the message P-ECM C to verify read access criteria CRP, 

- memorising KP C , and 

- recovering the current SC-ECMi message in the content, 

- decrypting the SC-ECMi message with the second service key K' s and verify 
access criteria, 

- recovering the encrypted keys CWj+i, CW i5 CW i+ i and the value p(i) indicating 
the parity of i, and 

- decrypting said keys depending on the direction of reading to deduce ECW and 
OCW; then 
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- applying either ECW or OCW to descramble the content. 

14. (Currently Amended) Method set forth in eith e r claim 1 1 of43, 

characterised in that the reception phase also includes 

the following steps: 

- generating a local key Ki from attributes 
contained in the message R-ECM and at least one parameter related to the identity of the 
receiving terminal, 

- locally over-encrypting the content to be recorded with this key Ki. 

- when playing back, regenerating the key Ki using attributes contained in the 
message P-ECM and at least one parameter related to the identity of the receiving 
terminal, 

- decrypting the recorded content using the 10 regenerated key Kj. 

15. (Currently Amended) Method set forth in on e of claims claim 1 te-44, characterised in that 
the broadcast digital data represent audiovisual programs. 

16. (Original) Access control system controlling access to a digital dataflow including a 
scrambling platform (2) including at least one generator of entitlement control messages ECM 
and at least one descrambiing receiver (4) provided with a security processor (14), characterized 
in that the scrambling platform (2) also includes: 

- a generator of entitlement control messages R-ECM C when recording the content 
of the received flow and a generator of entitlement control messages P-ECM C when 
playing back the content of a recorded flow, and in that the descrambiing receiver (4), 
includes: 

- means of recovering the ECM channel from P-ECM C , R-ECM C messages, 

- means of decrypting the content of a received flow to record it, and 

- means of decrypting the content of a recorded flow to play it back. 

17. (Original) System set forth in claim 16, characterised in S that the descrambiing receiver (4) 
also includes means of generating a local key Ki from attributes contained in the R-ECM C 
message and the identity of the receiving terminal to locally encrypt/decrypt the content of the 
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received flow. 

1 8. (Original) Scrambling platform (2) including at least one generator of entitlement control 
messages ECM controlling access to a dataflow broadcast in scrambled form, characterised iii 
that it also includes agenerator of entitlement control mdssages R-ECM C to control recording the 
content of a received flow and a generator of entitlement control messages P-ECM C to control 
play back the content of a recorded flow. 

19. (Original) Scrambling platform set forth in claim 18, characterised in that it includes: 

- means of breaking down the scrambling period into a sequence of crypto-periods 
CP; each defining a validity duration of an individual key CWj, 

- means of encrypting the content of the flow at each change of the crypto-period i 
using the key CWi, 

- means of calculating an entitlement control message SC-ECMi as a function of 
the keys CWh,CWi,CWm corresponding to crypto-periods CP i5 CPm and CP i+ i 
respectively, a parity parameter p(i) and the access control criterion CAi, said message 
SC-ECMi being intended to carry access rights to a data segment ~1 corresponding to at 
least two crypto-periods, 

- means of encrypting the keys CWm, CWj, CW i+ i using a playback key KP C , 

- means of encrypting the encryption result in the previous step using a second 
service key K' s , 

- means of encrypting the result of the encryption in the previous step using a 
record key KRc. 

20. (Original) Platform set forth in claim 18, characterised in that it also includes: 

- means of breaking down the scrambling period into a sequence of crypto-periods 
CPi each defining a validity duration of an individual key CWi, 

- means of encrypting the content of the flow at each change of the crypto — period 
i using the key CWj, 

- means of calculating an entitlement control message SC-ECMi as a function of 
the keys CWi_i,CWj,CW i+ i corresponding to crypto-periods CP;, CPj-i and CPj+i 
respectively, a parity parameter p(i) and the access control criterion CAi, said message 
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SC-ECMi being intended to carry access rights to a data segment Si corresponding to at 
least two crypto-periods, 

- means of encrypting the encryption result in the previous step using a second 
service key K' s , 

- means of encrypting the control words CW i+ i, CWj, CW i+ i using a playback key 

KPc, 

- means of encrypting the encryption result in the previous step using a record key 

21. (Original) Descrambling receiver (4) of a dataflow broadcast in scrambled form using a 
scrambling key CWi including a security processor including at least one key KR^ intended to 
descramble record entitlement control messages R-ECM C and at least one key KP C intended to 
descramble the play back entitlement control messages P — ECMo, receiver characterised in that 
it includes: 

-means of recovering the ECM channel from P-ECM C messages, and R-ECM C 
messages from the signal attached to the service broadcasting the content; 

- means of decrypting messages R-ECM C using the record key KRc to verify the 
right to record the content of a received flow, 

-means of decrypting messages P-ECM C using the key KP C to verify the right to 
play back the content of a recorded flow. 

22. (Original) Receiver set forth in claim 21, characterized in that it also includes means of 
generating a local key Ki from attributes contained in the receiver identity message R-ECM and 
locally decrypt the content of the received flow. 

23. (Original) Receiver set forth in claim 21, characterised in that the security processor is a 
smart card. 

24. (New) Method set forth claim 3, characterised in that the sending phase includes the 
following steps: 

for each dataflow: 

- breakdowning the scrambling period into a sequence of crypto-periods CFi each 
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defining a validity duration of an individual key CWj, and at each crypto — period change, 

- scrambling the content of the flow using the key CW], and memorise a value p(i) 
representative of the parity of i,ing an entitlement control message SC — ECMj as a 
function of the previously defined encryption keys CWm, CWj, CWj+i, the value p(i) and 
the criterion CAj, said message SC — ECMj being intended to transport access rights to a 
data segment Si corresponding to at least two crypto-periods, 

- encrypting the keys CWm, CWj, CWj+i, using the playback key KP C , 

- encrypting the result of the encryption in the previous step using a second service 
keyK' s , 

- encrypting the result of the encryption in the previous step using the recording key KRc. 

25. (New) Method set forth claim 3, characterised in that the sending phase includes the 
following steps: 

for each dataflow: 

- breakdowning the scrambling period into a sequence of crypto— periods CPi each 
defining a validity duration of an individual key CW i? and at each crypto-period change, 

- scrambling the content of the flow using the key CW i9 and memorise a value p(i) 
representative of the parity of i, 

- calculating an entitlement control message SC- ECMj as a function of the 
previously defined encryption keys CWj+i, CWi, CWj+i, the value p (i) and the criterion CAj, 
said message SC-ECMi being intended to transport access rights to a data segment -1 
corresponding to at least two crypto-periods, 

- encrypting the keys CWj+i, CWj, CW i+ i using a second service key K' s , 

- encrypting the result of the encryption in the previous step using the key KP C , 

- encrypting the result of the encryption in the previous step using the recording key KRc. 

26. (New) Method set forth claim 5, characterised in that the emission phase also includes the 
following steps: 

- calculating the entitlement control message ECMj = f[(ECWj,OCWj,CA)] wherein ECWj 
and OCWj represent the even and odd control words previously encrypted using a first service 
key K 5 , respectively 

ECWi=CWi if i is even, otherwise ECWi=CWi+l; 
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OCWpCWi if i is odd, otherwise OCWi=CW i+ i 

- broadcasting parameters in the ECM signal, identifying the ECM channels attached to 
the service broadcasting the content of messages ECM;, P-ECMc, R- ECM C , SC-ECMj, 

- providing the ECMj, P-ECM C , R-ECM C , SC-ECMj messages to the receiving terminal 

27. (New) Method set forth claim 12, 

characterised in that the reception phase also includes 

the following steps: 

- generating a local key Ki from attributes 
contained in the message R-ECM and at least one parameter related to the identity of the 
receiving terminal, 

- locally over-encrypting the content to be recorded with this key K\. 

- when playing back, regenerating the key Ki using attributes contained in the 
message P-ECM and at least one parameter related to the identity of the receiving 
terminal, 

- decrypting the recorded content using the 10 regenerated key Ki. 
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